Microsoft O365 International Access

This request is for access to Microsoft O365 Internationally, and requires both Agency/Secretariat’s General Counsel or designee approval, and Agency/Secretariat’s CISO or designee approval.

This access is for a user who will work outside of the United States (American Samoa, Guam, Northern Mariana Islands, Puerto Rico, and the Virgin Islands require international access) on either a temporary, or semi-permanent basis. For users with a primary work location outside of the United States, (consultants, contractors, vendors, etc.) access must be reviewed on a regular basis.

Please request access at least 2 weeks prior. If requesting travel to a country on the deny-list - requires Enterprise EOTSS Chief Information Security Officer (CISO) approval.

A communication was sent to ITLs and DSOs on updates to the current catalog item. 

IS.003 Access Management Standard – Information Systems -6.3.3 No system or database containing non public information shall be directly accessible from an untrusted network  

IS.004 Asset Management Standard - 6.7 Endpoint Security -6.7.10 Ensure that Commonwealth-owned or managed devices do not leave the United States.

IS.006 Communication and Network Security Standard – 6.2 Remote Access Security Management -6.2.1 All external connections to the Commonwealth family of networks must be reviewed and approved by the Commonwealth CISO

DENY LIST (Updated July 8, 2025)

The list above was created by using a combination of sources from the federal government commerce ban, the CDC, and the US Department of State. 

Refer to the U.S. Department of State for a listing of current travel advisories: 
https://travel.state.gov/content/travel/en/traveladvisories/traveladvisories.html/